gunpoint

gunpoint builds other people's trees statically by any means necessary

supports make/cmake/meson/autohell

sanitizes build files, wraps cc/cxx/ar/ranlib, rips out -shared habits, forces -static, and runs the native build recipe for you

how to use

1. make builds gunpoint
2. gunpoint init /path/to/src [-d /where/your/deps/are]
   • writes .gunpoint/bin/gunpoint-* wrappers and metadata
   • sanitizes meson/cmake/autohell trees to prefer static
3. gunpoint build /path/to/src
   • sets env in-process (CC/CXX/AR/RANLIB/CPPFLAGS/LDFLAGS/PKG_CONFIG_PATH)
   • runs meson/cmake/autohell/make defaults and installs into .gunpoint/out for easy extraction

notes

• this is for C/C++ projects
• wrappers strip dynamic flags and turn shared outputs into static archives
• autohell --prefix forced to .gunpoint/out; meson/cmake install there too
• portable to any posix system with a c99 compiler

read

why is static linking so damn hard nowadays? you can thank the folks over at the gnu project for that

dynamic linking considered harmful:

• http://harmful.cat-v.org/software/dynamic-linking/
• https://catonmat.net/ldd-arbitrary-code-execution
• https://attack.mitre.org/techniques/T1574/006/
• https://blog.habets.se/2012/05/Shared-libraries-diamond-problem.html